Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File: io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier: 9ykMI3sErPwPv62Z6dMgAnouYJKt9FV5BbxD4u82ewU=
Subject key identifier: 6D:93:B8:39:8A:09:C2:7B:DD:08:F1:E2:21:DA:75:38:3D:32:E5:A5
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer: /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial: 0199FC58D7916408B2C7A198761E3E09ED40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number: 0ADB
Signing time: Sun 19 Oct 2025 12:01:44 +0000
Manifest this update: Sun 19 Oct 2025 12:01:44 +0000
Manifest next update: Mon 20 Oct 2025 12:01:44 +0000
Files and hashes: 1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: Ye5Xk7pdwPYG1STsswtq9wXG29Hvs01lAO4jNiRNv0c=)
2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d7:91:64:08:b2:c7:a1:98:76:1e:3e:09:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Validity
Not Before: Oct 19 12:01:44 2025 GMT
Not After : Oct 20 12:01:44 2025 GMT
Subject: CN=6d93b8398a09c27bdd08f1e221da75383d32e5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2e:bf:73:a0:57:d4:f1:73:f8:e3:d2:87:c8:
dc:de:ef:7f:8f:27:1c:c9:b2:60:99:e4:e4:08:f5:
7f:f9:88:98:7c:b1:35:5b:df:2d:e8:b9:dd:cd:6f:
35:34:e5:da:9c:28:ad:04:30:0c:ea:08:31:f2:11:
9d:40:03:5e:6b:ad:0c:54:93:35:fa:92:f1:9d:22:
98:74:b3:d0:85:26:22:8e:d6:86:f4:20:f6:1c:c9:
cf:76:b4:33:69:e7:45:0d:6b:cc:0b:bc:4c:2e:84:
e4:4e:30:3d:c2:0f:a0:69:ea:45:1e:b4:35:dd:88:
b2:88:3a:01:fd:bc:45:dd:45:f0:0f:51:a6:3a:43:
5c:3b:08:76:d4:38:c4:3e:2c:c5:41:8d:70:1b:b1:
69:65:96:7f:01:0d:b2:34:22:fa:b7:07:36:5d:53:
35:6f:36:4d:2d:f9:12:49:1a:d9:c4:93:f8:84:b0:
78:7b:5b:ab:70:c0:23:8a:a9:b1:bc:4a:52:eb:ee:
87:7e:60:59:e3:d2:1a:4f:c9:3d:9e:34:cd:72:15:
05:92:7c:14:3c:4e:ef:ff:bd:e6:ba:de:ab:bb:69:
bc:eb:13:76:8f:f8:c8:37:21:85:09:59:de:2f:51:
a7:d3:42:af:ea:51:ee:e9:24:22:12:e9:59:37:50:
26:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:93:B8:39:8A:09:C2:7B:DD:08:F1:E2:21:DA:75:38:3D:32:E5:A5
X509v3 Authority Key Identifier:
keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:09:a1:4a:d1:1c:16:04:a2:d5:c6:dc:04:64:d4:9e:47:3b:
a1:94:62:63:ad:92:2f:ed:1a:a5:d9:1d:e3:4b:a0:df:f1:6f:
30:f9:d0:74:1b:33:c1:c4:c9:eb:47:c1:db:21:e2:8c:46:e1:
86:77:38:bf:28:2e:2d:11:52:72:34:5a:a8:e7:66:a2:db:6f:
91:7a:98:98:e4:90:d5:1a:3c:a9:90:f4:b6:0e:5b:41:c8:bf:
87:bb:20:36:d0:26:be:62:8e:c7:83:70:23:41:8f:d8:b2:2a:
7b:07:65:7b:0c:07:f7:b2:50:e4:d4:72:dd:08:7d:9b:e5:db:
d3:18:96:65:d6:a6:b2:f5:02:0e:54:6d:90:5f:dc:c8:8b:02:
36:3f:10:72:cd:31:8d:b8:3e:25:86:0d:7f:7d:9d:fa:5f:6f:
a7:55:c0:6c:6f:2f:ff:09:3a:d3:30:04:b0:b5:8f:c1:bd:b8:
1d:aa:06:e2:71:c2:6d:22:0b:4d:15:22:99:64:3b:cf:8d:11:
31:99:6b:56:27:48:71:d7:c0:d2:98:a7:c5:1c:ce:ba:63:73:
b0:8f:60:c6:ea:2b:7f:d5:f8:d4:34:a8:b6:50:c3:df:0a:3f:
64:5d:03:64:1b:43:ad:f9:30:67:bd:83:3e:d6:ce:84:54:c1:
d7:2b:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:11:06 2025 by rpki-client